File tree Expand file tree Collapse file tree 1 file changed +1
-1
lines changed
modules/exploits/windows/local Expand file tree Collapse file tree 1 file changed +1
-1
lines changed Original file line number Diff line number Diff line change @@ -216,7 +216,7 @@ def cleanup
216
216
clean_up_rc = ""
217
217
clean_up_rc << "execute -H -f wmic -a \" /NAMESPACE:\\ \" \\ \\ \\ \\ root\\ \\ subscription\\ \" PATH __EventFilter WHERE Name=\\ \" Telemetrics\\ \" DELETE\" \n "
218
218
clean_up_rc << "execute -H -f wmic -a \" /NAMESPACE:\\ \" \\ \\ \\ \\ root\\ \\ subscription\\ \" PATH CommandLineEventConsumer WHERE Name=\\ \" Telemetrics\\ \" DELETE\" \n "
219
- clean_up_rc << "execute -H -f wmic -a \" /NAMESPACE:\\ \" \\ \\ \\ \\ root\\ \\ subscription\\ \" PATH __FilterToConsumerBinding WHERE Filter='__EventFilter.Name=\\ \" Telemetrics\\ \" ' DELETE\" "
219
+ clean_up_rc << "execute -H -f wmic -a \" /NAMESPACE:\\ \" \\ \\ \\ \\ root\\ \\ subscription\\ \" PATH __FilterToConsumerBinding WHERE Filter='__EventFilter.Name=\\ \" Telemetrics\\ \" ' DELETE\" \n "
220
220
clean_up_rc << "execute -H -f wmic -a \" /NAMESPACE:\\ \" \\ \\ \\ \\ root\\ \\ subscription\\ \" PATH __EventFilter WHERE Name=\\ \" #{ name_class } \\ \" DELETE\" \n "
221
221
clean_up_rc << "execute -H -f wmic -a \" /NAMESPACE:\\ \" \\ \\ \\ \\ root\\ \\ subscription\\ \" PATH CommandLineEventConsumer WHERE Name=\\ \" #{ name_class } \\ \" DELETE\" \n "
222
222
clean_up_rc << "execute -H -f wmic -a \" /NAMESPACE:\\ \" \\ \\ \\ \\ root\\ \\ subscription\\ \" PATH __FilterToConsumerBinding WHERE Filter='__EventFilter.Name=\\ \" #{ name_class } \\ \" ' DELETE\" "
You can’t perform that action at this time.
0 commit comments